Amendment to the Claims 



1 . (Amended) A method for protecting a sequence computer instructions eede 
comprising th e st e ps of : 

preparing first obscuring instructions; 

serializing the sequence of computer instructions; and 

injecting a l argo number o f second obscuring instructions into the serialized 

sequence of computer instructions code in an automated process , using the first 

obscuring instructions, to produc e an obscur e d s e qu e nc e of comput e r 

i nstructions that i n tota l i s human l y i mposs i b le to r e ad and und e rstand; and 

encrypt i ng a stat i c imago of tho obscured soquonco to protect aga i nst d i rect 

docompi l at i on. 

2. (Amended) The method of Claim 1 , further comprising th e st e p of executing 
the serialized seguence of computer instructions injected with tfre -the second obscured 
instructions^ one instruction at a time , th e r e by mak i ng run t i m e trac e and obs e rvat i on a 
la bor i nt e ns i v e manua l proc e ss . 

3. (Amended) The method of Claim 1 , wherein th e obscuring i nstruct i ons ar e 
i dent i f i od bv codos further compr i sing tho steps of: the method further comprises 

g e nerat i ng a first sot of obscur i ng i nstruct i ons hav i ng a f i rst s e t of codes 
associat e d th e r e w i th; 

transforming atbe first set of obscuring instruction identification codes associated 
with some or all of the first s e t of obscuring instructions to generate -ifrto a 
second set of obscuring instruction dentification codes; and 
generating the a second se^ef-obscuring instructions i dent i fi e d bv using the 
second set of obscuring instruction identification codes. 

4. (Amended) The method of Claim 3, wherein the obscuring instruction 
identification codes comprise are numeric values cod e s and said generating of the 
second set of obscuring instruction identification codes comprises performing a 
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mathematical transformation i s p e rform e d on the numeric cod e s values of the first set 
of obscuring instruction identification codes to produce the numeric cod e s values of the 
second set of obscuring instruction identification codes . 

5. (Amended) The method of Claim 44, whoroin tho obscuring i nstructions aro 
i d e nt i f ie d by num e r i c cod e s furth e r compr i s i ng th e stops of: further comprising injecting 
into the serialized sequence of instructions injected with the second obscuring 
instructions, a description of the mathematical transformation performed. 

gen e rat i ng a first s e t of obscur i ng i nstruct i ons hav i ng a f i rst s e t of num e r i c cod e s 
associat e d th e r e w i th; 

p e rforming a mathomatica l transformat i on on tho numor i c cod e s of th e first s e t to 
produce a second s e t of num o ric cod e s; a nd 

generat i ng a socond sot of obscur i ng i nstruct i ons i dont i f i od by tho socond sot of 
num e r i c cod e s. 

6. (Amended) The method of Claim 1§, furth e r compr i s i ng tho stop of 
compr e ss i ng th e static i mag e by r e cord i ng i n th e stat i c i mag e a r e cord of th e 
transformat i on us e d to g e n e rat e th e s e cond s e t of obscur i ng i nstruct i ons, wherein said 
injecting comprises systematically injecting the second obscuring instructions with a 
plurality of copies of a runtime manager, forming a plurality of obscured instruction 
blocks, each comprising a copy of the runtime manager, one or more of the serialized 
seguence of instructions, and one or more of the second obscuring instructions. 

7. (Amended) The method of Claim 64, furth e r compr i s i ng th e st e p of 
compr e ss i ng th e stat i c i m a g e , wherein said serialized sequence of instructions, said 
second obscuring instructions, copies of said runtime manage, and the resulting 
obscured instruction blocks are in source form, and the method further comprises 
obscurely compiling the obscured instruction blocks into object form, preserving the 
obscuration. 
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8. (Amended) The method of Claim 74-, wh e r e in th e obscur e d s e qu e nc e of 
comput e r i nstruct i ons i s organ i z e d i nto a s e qu e nc e of b l ocks of comput e r i nstruct i ons 
and th e st e ps of e ncrypt i ng a stat i c i mag e compr i s e s th e st e ps of: 

e ncrypting a first b l ock to form a first e ncrypt e d output; 

e ncrypt i ng a s e cond b l ock and th e first e ncrypt e d output to form a s e cond 

e ncrypt e d output; and 

e ncrypt i ng a th i rd b l ock and th e s e cond e ncrypt e d output to form a third 
e ncrypt e d output. 

further comprising successively and recursively encrypting up to all, except a root 
one, of the obscured instruction blocks in object form, to form an obscured 
executable image having the encrypted ones of the obscured instruction blocks 
in object form successively nested. 

9. (Amended) The method of Claim 8, wherein the successive and recursive 
encryption further comprisesmg th e st e p of compressing e ach block the instructions as 
ii-is -being encrypted . 

10. (Amended) A method for protecting data of a data file comprising th e st e ps 

ef: 

preparing first obscuring data; 

injecting a l arg e numb e r of second obscuring data into a plurality of locations in 
the data file using m an automated process and the first obscuring data, to 
produc e organize the data of the data file into a& plurality of obscured s e qu e nc e 
of data blocks, with each of the obscured data blocks having a portion of the 
data and one or more obscuring data that in total i s human l y i mposs i b le to r e ad 
and und e rstand ; and 

successively and recursively encrypting a stat i c i mago of th e obscur e d s e gu e nc e 
to prot e ct aga i nst dir e ct d e comp il at i on the obscured data blocks into a plurality of 
encrypted obscured data blocks that are successively nested . 
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1 1 . (Amended) The method of Claim 1 0, wherein th e obscuring d a t a a r o 
i dent i f i ed by cod e s further compr i sing' 1 tho stops of: the method further comprises 

g e n e rat i ng a f i rst s e t of obscur i ng data having a first s e t of cod e s assoc i ated 
th e r e w i th; 

transforming atbe first set of obscuring data identification codes associated with 
some or all of the first set of obscuring data mte -to generate a second set of 
obscuring data identification codes; and 

generating the a second set of obscuring data i d e ntif ie d b v using the second set 
of obscuring data identification codes. 

12. (Amended) The method of Claim 1 1 , wherein the obscuring data 
identification codes comprise afe numeric values cod e s and said generating of the 
second set of obscuring data identification codes comprises performing a mathematical 
transformation is performed on the numeric codes values of the first set of obscuring 
data identification codes to produce the numeric cod e s values of the second set of 
obscuring data identification codes . 

13. (Amended) The method of Claim 120, wh e r ei n th e obscur i ng data aro 
i d e nt i fi e d by num e r i c cod e s furth e r compr i s i ng th e st e ps of: further comprising injecting 
into the data file injected with the second obscuring data, a description of the 
mathematical transformation performed. 

g e n e rat i ng a first s e t of obscur i ng data hav i ng a f i rst s e t of num e r i c cod e s 
assoc i at e d th e r e w i th; 

p e rforming a math e mat i ca l transformation on th e num e r i c cod e s of th e first s e t to 
produc e a s e cond s e t of num e r i c cod e s; and 

g e n e rat i ng a s e cond s e t of obscur i ng data i d e nt i f ie d by th e s e cond s e t of 
num e r i c cod e s. 

14. (Cancelled) Th e m e thod of C l a i m 13 furth e r compr i s i ng th e st e p of 
compr i s i ng th e static i mag e by r e cord i ng i n th e stat i c imag e a r e cord of th e 
transformat i on us e d to g e n e rat e th e s e cond s e t of obscur i ng data. 
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15. (Cancelled) Th e mothod of C l a i m 10 furth e r compr i s i ng th e st e p of 
compr e ss i ng th e stat i c i mago. 

16. (Cancelled) Th e mothod of Cla i m 10 f wh e r ei n th e obscur e d s e qu e nc e of data 
i s org a n i z e d i nto a s e qu e nc e of blocks of data and th e st e ps of e ncrypt i ng a stat i c 
i mage compris e s th e st e ps of: 

e ncrypt i ng a first block to form a f i rst e ncrypt e d output; 

e ncrypt i ng a s e cond b l ock and th e first e ncrypt e d output to form a s e cond 

e ncrypt e d output; and 

e ncrypt i ng a th i rd b l ock and th e s e cond e ncrypt e d output to form a th i rd 
e ncrypt e d output. 

17. (Amended) The method of Claim 10§, wherein the successive and recursive 
encryption further comprisesi ng th e st e p of compressing e ach block as i t is the data 
being encrypted. 

18. (Cancelled) Th e m e thod of C l a i m 10, furth e r compr i s i ng th e st e ps of: 
g e n e r a t i ng a f i rst s e t of obscur i ng d a t a ; and 

p e rforming a math e mat i cal transformat i on on th e f i rst s e t of obscur i ng data to 
produc e a s e cond s e t of obscur i ng data. 

19. (Amended) Apparatus for protecting a sequence of computer cod e with 
obscur i ng instructions, sa i d apparatus comprising: 

means for storing first obscuring instructions; 

means for serializing the seguence of computer instructions; and 

means for automatically injecting a l arg e numb e r o f second obscuring instructions 

into the sequence of computer code -instructions using the first obscuring 

instructions, to produc e an obscur e d s e qu e nc e of computer i nstruct i ons that in 

tota l i s humanly i mposs i b l e to road and und e rstand; and 

m e ans for e ncrypt i ng a stat i c im a g e of th e obscur e d s e qu e nc e to prot e ct aga i nst 

d i r e ct d e comp ila t i on. 
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20. (Amended) The apparatus of Claim 19, further compris i ng means for 
ox o cut i ng th o obscur i ng i nstructions ono instruct i on at a t i mo, thoroby mak i ng run tim e 
traco and observat i on a l abor intons i vo manua l proooss. wherein the means of injecting 
are adapted to systematically inject the second obscuring instructions and copies of a 
runtime manager into the serialized seguence of instructions to form a plurality of 
obscured instruction blocks. 

21 . (Amended) Apparatus for protecting a sequence of computer cod e w i th 
obscur i ng instructions comprising: 

an obscuring instruction bank T for storing to store obscuring instructions each 
of which is identified by a n obscuring instruction identification code; 

a transformation function bank for stor i ng to store transformation functions 
adapted to transform obscuring instruction identification codes ; and 

a generator for g e n e rat i ng to generate blocks of obscuring instructions by 
selecting identification codes of the obscuring instructions from th e stored in 
obscuring instruction bank, and transformation functions from the transformation 
function bank, and applying said selected transformation functions b ei ng us e d by 
th e g e n e r a tor to transform the selected obscuring instruction identification codes 
that i d e nt i fy s e l e ct e d obscur i ng i nstructions so a s and employ the transformed 
obscuring instruction identification codes to generate oth e r codes that id e nt i fy 
othe radditional obscuring instructions that ar e th e n s e l e ct e d by th e g e n e rator . 

22. (Amended) A method for executing a plurality of critical instructions that ar e 
obscur e d by obscur i ng i nstruct i ons and stor e d a l ong w i th e ncrypt e d l oad i ng instruct i ons 
and d e crypt i on k e ys , said method comprising th e st e ps of : 

loading a first executable instruction block of an executable module, the first 
executable instruction block having one or more of the critical instructions, and 
the executable module further having a plurality of nested encrypted executable 
instruction blocks having the remaining of the critical instructions that were 
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generated through successive and recursive encryption i nto a first m e mory 
addr e ss a first b l ock of l oad i ng i nstruct i ons ,_and 

executing the loadedmg first executable instruction s block to a l locat e a f i rst 
dynam i c m e mory addr e ss , including loading the plurality of nested encrypted 
executable instruction blocks having a first remainder of the critical instructions, 
retrieving a first decryption key from the loaded plurality of nested encrypted 
executable instruction blocks, decrypting the loaded plurality of nested encrypted 
executable instruction blocks once to recover a second executable instruction 
block and a first remainder of the plurality of nested encrypted executable 
instruction blocks having a second remainder of the critical instructions. 7 

l oad i ng and e x e cut i ng at th e f i rst dynamic m e mory addr e ss at le ast on e 
cr i t i ca l i nstruction that i s obscur e d by obscur i ng i nstruct i ons; 

r e tr ie v i ng a f i rst decryption k e y; 

decrypt i ng a second b l ock of load i ng i nstructions us i ng th e d e cryption koy; 
l oad i ng i nto sa i d f i rst memory address tho second b l ock of l oad i ng i nstruct i ons; 

oxocuting tho l oad i ng i nstruct i ons to a ll ocate a s e cond dynam i c memory 
addross; and 

l oading and e x e cuting at th e s e cond dynam i c m e mory addr e ss at le ast on e 
moro cr i t i ca l i nstruction that i s obscur e d by obscur i ng i nstruct i ons. 

23. (Amended) The method of Claim 22, further comprising the steps off 

executing the second executable instruction block, including retrieving a 
second decryption key from the first remainder of the plurality of nested 
encrypted executable instruction blocks, decrypting the first remainder of the 
plurality of nested encrypted executable instruction blocks once to recover a third 
executable instruction block and a second remainder of the plurality of nested 
encrypted executable instruction blocks having a third remainder of the critical 
instructions, rotr i ov i ng a s e cond decryption k e y; 

d e crypt i ng a th i rd b l ock of l oad i ng instruct i ons using th e s e cond 
d e crypt i on k e y; 
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l oading into said first memory addr e ss th o th i rd b l ock of loading 
instruct i ons; 

e x e cut i ng th e l oad i ng i nstruct i ons to a ll ocat e a th i rd dynam i c memory addr e ss; 

orvd 

Ul IU 

load i ng and executing at tho th i rd dynam i c m e mory addr e ss at l east on e mor e 
cr i t i ca l instruct i on th a t i s obscur e d by obscur i ng i nstruct i ons. 

24. (New) The apparatus of claim 20, wherein the obscured instructions blocks 
are in source form, and the apparatus further comprises obscuration compiler means 
for compiling the obscured instruction blocks into a plurality of obscured instruction 
blocks in object form, preserving the obscuration. 

25. (New) The apparatus of claim 24, wherein the apparatus further comprises 
encryption means for successively and recursively encrypting up to all, less a root one, 
of the obscured instruction blocks in object form, to form an obscured executable image 
having the encrypted ones of the obscured instruction blocks in object form 
successively nested. 

26. (New) The apparatus of claim 25, wherein the encryption means includes 
compression means for compressing instructions being encrypted. 

27. (New) The apparatus of claim 21 . further comprising an injector to 
automatically inject the additional obscuring instructions and copies of a runtime 
manager into the seguence of computer instructions, to form a plurality of obscured 
instructions blocks, each comprising a copy of the runtime manager, one or more of the 
computer instructions, and one or more of the obscuring instructions. 
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